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CLAIMS 

1. Method for monitoring the usage of a service by a communication device 
coupled to a tamper resistant module, in particular a smart card, said 
service being transmitted from a resource able to communicate with said 

5 communication device by way of a network, said service comprising a 

plurality of encrypted data flow, the use of said service comprising 
successive decryption steps of data flow by a respective first key EK, said 
first key EK being encrypted in the data flow and decrypted in the tamper 
resistant module by way of a second key KEK stored in said tamper 

10 resistant module or derived inside said module, characterized in that said 

method comprises the following steps: 

a. A counting step, in which a memory location stores a count of 
occurrences of decryption steps of said first key EK attached to a 
same service; 

15 b. A using step, in which said counter is used to prove the amount of 

dataflow which has been decrypted. 

2. Method according to claim 1, characterized in that the module stores a 
predetermined fixed number, and in that it comprises a comparison step in 
which the incrementing counter is compared to the predetermined fixed 

20 number for checking if the counter has reached or not the value of the 

fixed number; if yes, adequate action can be performed. 

3. Method according to claim 1 , characterized in that a command is sent to 
the tamper resistant module for renewing the key KEK. 

4. Method according to claim 1 , characterized in that a command is sent to 
25 the tamper resistant module for Resetting/Updating the counter. 

5. Method according to claim 3 or 4, characterized in that said command is 
encrypted by a third key (MK) known by the tamper resistant module. 
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6. Method according to claim 2, characterized in that the action is the 
completion of decryption steps. 

7. Method according to claim 1, characterized in that, each first key is sent 
periodically, and in that the amount of data is converted into time of use 

5 limiting the use of a service in time. 

8. Method according to claim 4 or 5, characterized in that said commands 
are transmitted to the tamper resistant module by way of the 
communication device, said communication device including a program for 
authorizing the transmission of such commands without reading its 

10 content. 

9. Data processing module, in particular a smartcard, able to receive 
services from a network, said services comprising a plurality of encrypted 
data flow, the use of said service comprising successive decryption steps 
of data flow by a respective first key EK, said first key EK being encrypted 

15 in the data flow and decrypted in said module by way of a second key KEK 

stored in said module or derived inside said module, characterized in that 
module comprises a microcontroller able to perform the following steps: 

a. A counting step, in which a memory location stores a count of 
occurrences of decryption steps of said first key EK attached to a 

20 same service; 

b. A using step, in which said counter is used to prove the amount of 
data flow which has been decrypted. 

10. Computer program including program code instructions to execute the 
counting step of the method defined in claim 1, when said program is 

25 executed on a data processing device as defined in claim 9. 



